New Panorama Interconnect Plugin

by a week ago - last edited a week ago (932 Views)

Panorama Interconnect.png

 

Are you helping to manage a large corporate environment with many firewalls that requires you to have multiple instances of Panorama? If so, then trying to keep the configurations in sync for the multiple instances of Panorama can be troublesome to deal with. 

Centralized configuration management of firewalls is necessary to ensure consistency of policies. The only option today for large enterprises with higher number of firewalls than current Panorama limits (1000 firewalls) is to deploy multiple instances of Panorama. Where the configuration is homogenous and replicated at scale, keeping multiple Panorama instances in sync to ensure consistency is a manual process that introduces operational delays and increases security risk due to human errors.

 

The good news is that Palo Alto Networks has just introduced a new Plugin for Panorama where a central Panorama controller instance can now manage multiple Panorama nodes. 

This new Interconnect plug-in will create a Panorama scale solution that can centralize management across one or more Panorama nodes to manage the entire device scale using all existing concepts of device groups, templates, objects, policies and network/device configuration. Note that this is a solution that replicates the configuration from a central Panorama Controller down to all Panorama nodes and provides no centralization of logging and reporting.

 

Panorama Interconnect overview.png

 

Panorama Interconnect features inlude:

  • Provide a Panorama management platform to achieve expending the total number of managed firewalls limitation from individual Panorama devices by adding them as nodes.
  • Centrally manage Panorama nodes. Status of each Panorama nodes and managed firewall devices can be viewed from the Panorama controller.
  • Centrally manage template stacks, templates, and device groups.
  • On-demand configuration sync across multiple Panorama nodes.
  • On-demand config push to managed firewall devices.

 

See Also

For more information about the Panorama Interconnect plugin, please see:

https://www.paloaltonetworks.com/documentation/81/panorama/panorama_adminguide/panorama-plugins/abou...

 

For more information on Panorama 8.1, please see the Tech Pubs documentation site here:

https://www.paloaltonetworks.com/documentation/81/panorama

 

 

Thanks for taking time to read this blog. If you liked it, please give me a Thumbs Up.

As always, we welcome all comments, questions and suggestions below in the comments section.

 

Stay secure,

Joe Delio

End of line.

Comments
by vsys_remo
a week ago

@jdelio wrote:

Note that this is a solution that replicates the configuration from a central Panorama Controller down to all Panorama nodes and provides no centralization of logging and reporting.


If PaloAlto now also adds exactly that - or at least a feature that the logs can be viewed (only a view, not a central storage) also on this panorama controller this would be f****** great!!!

But this is a good start ;)

 

Ask Questions Get Answers Join the Live Community